Closed ivanfetch closed 5 years ago
Thank you for your submission, we really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.
Is this something that should have a migration?
Yes, I think, based on our discussion at the last office hours, that it should.
I'll merge this and create a separate issue for the two migrations that need to be created.
The kops component will create a cluster ready for the AWS IAM Authenticator daemonset to be deployed. Pod volumes should be mounted to
/srv/kubernetes/aws-iam-authenticator
, as is typical in most kops implementations of AWS IAM Authenticator.Using the AWS IAM Authenticator container image to create the certificate and Kubernetes API Server config avoids a cluster update, and allows managing the AWS IAM Authenticator daemonset outside of kops.